A GNOME Web security update has been released for Ubuntu Linux 20.04 LTS and 22.04 LTS.
==========================================================================
Ubuntu Security Notice USN-5561-1
August 10, 2022
epiphany-browser vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
Summary:
Several security issues were fixed in GNOME Web.
Software Description:
- epiphany-browser: Intuitive GNOME web browser
Details:
It was discovered that GNOME Web incorrectly filtered certain strings. A
remote attacker could use this issue to perform cross-site scripting (XSS)
attacks. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-45085,
CVE-2021-45086, CVE-2021-45087)
It was discovered that GNOME Web incorrectly handled certain long page
titles. A remote attacker could use this issue to cause GNOME Web to crash,
resulting in a denial of service, or possibly execute arbitrary code.
(CVE-2022-29536)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 22.04 LTS:
epiphany-browser 42.1-1ubuntu1
Ubuntu 20.04 LTS:
epiphany-browser 3.36.4-0ubuntu2
After a standard system update you need to restart GNOME Web to make all
the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5561-1
CVE-2021-45085, CVE-2021-45086, CVE-2021-45087, CVE-2022-29536
Package Information:
https://launchpad.net/ubuntu/+source/epiphany-browser/42.1-1ubuntu1
https://launchpad.net/ubuntu/+source/epiphany-browser/3.36.4-0ubuntu2